News for hackers. Stuff that matters.
Re:.name Grandfathered by swiftcoder on Tuesday November 10, 2026 @01:30PM (#50444248)
It has weird interactions with some modern browser features. For example domain isolation doesn't apply between subdomains of the same TLD, so john.smith.name and drew.smith.name don't get isolation in naive implementations.
Re:.name Grandfathered by tylergetsay on Tuesday November 10, 2026 @01:33PM (#50444277)
wouldn't that be a problem with a lot of other domains? like locality domains
Re:.name Grandfathered by timeinput on Tuesday November 10, 2026 @01:47PM (#50444456)
It definitely is. <ingress>.k8s.<mydns>.com regularly confuses what password I want to use if I have different authentication per ingress. More commonly if I run something else at <name>.<mydns>.com firefox and chrome are both happy to offer up my password for <other service>.<mydns>.com.

Closed. Wont fix.

Re:.name Grandfathered by mixdup on Tuesday November 10, 2026 @02:36PM (#50445188)
yes, but other locality domains are fairly static and well-known

.co.uk wouldn't have the same problem because everyone knows that combo is a TLD in and of itself. with a seemingly infinite possible combinations of blah.name that could be a TLD itself, or, might just be a subdomain of .name, it gets really weird

Re:.name Grandfathered by OkayPhysicist on Tuesday November 10, 2026 @03:07PM (#50445598)
We solve that problem with the public suffix list. The problem is there's a lot of .name domains, each of which would need to be added to the list.
Re:.name Grandfathered by OkayPhysicist on Tuesday November 10, 2026 @03:06PM (#50445588)
The real problem is that we'd have to add a wildcard to the public suffix list. That's it.

The public suffix list is the big list of all the URL suffixes that should not imply shared ownership of all their subdomains. For example the line

com

says "XYZ.com" and "ABC.com" should not be assumed to be controlled by the same entity.

Problem is, all 1st level domains registered to the .name TLD should be added to the list, and that's a lot of domains. The correct answer, IMO, would be to add a wildcard

*.name

but that would involve updating all the code that relies on the public suffix list to support said wildcard.